CVE-2013-1468
Status: ModifiedHigh (7.6)—Exploit
Severity7.6High · CVSS 2.0
Exploitation probability5.73 %higher than 93% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB
Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.
CVSS
- Base score
- 7.6
- Version
- 2.0
- Vector
- AV:N/AC:H/Au:N/C:C/I:C/A:C
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 5.73 %
- Percentile among all scored CVEs
- 93
- Score date
- 10/21/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · Piwigo 2.4.6 - Multiple Vulnerabilities (3/1/2013)
Affected technologies (1)
CWEs
- CWE-352
References
Show 18 references
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html
- http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html
- http://piwigo.org/bugs/view.php?id=0002844
- http://piwigo.org/forum/viewtopic.php?id=21470
- http://piwigo.org/releases/2.4.7
- http://secunia.com/advisories/52228
- http://www.exploit-db.com/exploits/24561
- http://www.osvdb.org/90504
- https://www.htbridge.com/advisory/HTB23144
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html
- http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html
- http://piwigo.org/bugs/view.php?id=0002844
- http://piwigo.org/forum/viewtopic.php?id=21470
- http://piwigo.org/releases/2.4.7
- http://secunia.com/advisories/52228
- http://www.exploit-db.com/exploits/24561
- http://www.osvdb.org/90504
- https://www.htbridge.com/advisory/HTB23144
Raw JSON (NVD)
Show
{
"id": "CVE-2013-1468",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "HIGH",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-03-14T03:13:32.660",
"references": [
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html",
"source": "cve@mitre.org"
},
{
"url": "http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://piwigo.org/bugs/view.php?id=0002844",
"source": "cve@mitre.org"
},
{
"url": "http://piwigo.org/forum/viewtopic.php?id=21470",
"source": "cve@mitre.org"
},
{
"url": "http://piwigo.org/releases/2.4.7",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/52228",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.exploit-db.com/exploits/24561",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/90504",
"source": "cve@mitre.org"
},
{
"url": "https://www.htbridge.com/advisory/HTB23144",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://piwigo.org/bugs/view.php?id=0002844",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://piwigo.org/forum/viewtopic.php?id=21470",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://piwigo.org/releases/2.4.7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/52228",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.exploit-db.com/exploits/24561",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/90504",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.htbridge.com/advisory/HTB23144",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en el complemento LocalFiles Editor de Piwigo anterior a v2.4.7 que permite a atacantes remotos secuestrar la autenticación de los administradores para peticiones que crean ficheros arbitrarios PHP a través de vectores sin especificar."
}
],
"lastModified": "2026-06-16T23:51:28.330",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C317128C-7749-4BE1-A7D3-88CAB5BE6F67",
"versionEndIncluding": "2.4.6"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.0.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D245F2A4-676D-478F-8D0F-E183CF52E656"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA08469C-BD2B-4EDA-86DB-35F65A1A35E4"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E349A00-60C3-426A-B6AA-B940B60B28F4"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D724AA1-B057-409F-ABCA-064586771118"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3A4E8E3-1920-43CB-9D84-9EF84BB5F9CF"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38A03451-C199-44DD-A4ED-298B50193FA6"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB4DCFBE-C8FC-4D80-9DE6-04BBC3494949"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "752561BC-D824-4264-8697-DD9DE88F7D53"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "615E6F3A-162D-42F6-A537-442E9ED0B385"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36F26A2A-2175-4665-ACA5-A417A665B662"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2D17AE0-823E-41EC-A282-10103975E792"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E99613B2-BF99-4A44-9240-9720A17206A1"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADBE8CF0-1CBE-478D-9E1E-54363F3B7C09"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B899A695-73BA-4459-86E4-E96E12FB4CA2"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7081BEAD-39F5-48EC-B13F-81073D7C4C2C"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAC7628A-2083-41A2-8621-DACD3F769C53"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D565B05-80D5-400A-ADBB-8DE393798D7E"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F7623DB-E676-41B3-A15D-6769BF7E230D"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDC7011F-D136-4402-93D8-3C6E8A7ED8BC"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15D63E08-D7E4-4960-B4A3-9BEBA6150CA7"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03BBE4F6-35E8-4935-B657-651D3D822890"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A62DCAD-3C28-4595-9095-90DBA3944BF4"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:1.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0064F204-3F3F-4E32-8104-A15ECC8464D3"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBF799AE-6BDA-43E9-B841-DAD6A3CC34F9"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37DF27D2-E4CB-4A49-8D42-F41ED29136C4"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABB57804-F8DA-4366-9B75-E5241D137352"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C51558C-4DF9-4D62-A679-64361E584802"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7C6E6DE-B5AC-48FA-A6EE-CF1C596D34BA"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "452E5E75-FD84-436E-A51B-793346A1456C"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C19CE4F7-2033-44E7-BBD2-70D451692E37"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53297CBE-F8E4-4BFF-BC49-51E7F26E11B8"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA9B8AE0-F86A-4362-BF9E-A04C8BF801B8"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E621568-52A8-4DCB-B0E4-0C40E0DB06F6"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "146C7D99-8B0C-44A0-96E0-C8FBBB5F4567"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC5D9559-C2C7-405E-8874-47B227D3CF1F"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0E85CC3-7B91-4ABE-A011-7167339F8EB6"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BCC087E-7ACA-4DE6-B8BF-43BECCB3049C"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "608D7317-53DE-4CAB-B396-3C7A6C6B418F"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07B2CA8C-4B5E-46AF-A9AF-1B35AD63FF46"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "886DF3A9-A97E-4C89-8EBF-F6A5872F26BC"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7024F414-7E9A-4FD9-9B34-EB0A5D820E87"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "068DE0CF-6D52-434D-A118-4D346014B07F"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F816C962-4FC3-4763-96BB-15EB27B367D3"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD204EAB-344D-4569-BB17-3E7C2A5EA92A"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBCC5440-AD21-47F4-BE33-898302981AC0"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96AC8E7D-5718-42F6-9829-59996D18EDFB"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A58D540A-4786-411D-AF4F-020120AA65A2"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F55F438-AF9D-405C-A1E6-758DE74EFC65"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03F4C388-E6B2-40C5-8C3C-DDD80D619F27"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "700425A6-CAF3-4ED5-8517-40FDB2450E49"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EED818B6-30DE-46C6-B240-FC9B5E5C6A78"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF463F04-8ED6-42A8-9B23-ADD85EE6FE76"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F1B61AB-ECE7-4E89-9059-2066F08F67AD"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB10D77F-38E8-4164-A651-399DFB6A4AD5"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21F1DB20-11A1-4145-8F7F-52CD3B07F0F8"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F41E5444-FDC0-47DF-8C4F-6AC69FFFED73"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F79451CF-562C-4DC1-B03F-7FA354E6C36C"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE24EE64-5390-4DFD-A5E4-42F5C2D5D609"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8474722-3819-418E-9C7E-FADC5EEE3D58"
},
{
"criteria": "cpe:2.3:a:piwigo:piwigo:2.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C33A514B-739F-4A78-A868-19860A2F4BCA"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}